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Abstract 

Let A be an elliptic curve over Q of square free conductor N. We 
E"^ | prove that if A lias a rational torsion point of prime order r such that r 

■ docs not divide 6N, then r divides the order of the cuspidal subgroup 

^: ofjow. 
•t-> 

1 Introduction 

Let A' be an elliptic curve over Q of square free conductor N and let A 
be the optimal curve in the isogeny class (over Q) of A' . Let Xq{N) be 
the modular curve over Q associated to Fo(N), and let Jo(iV) be its Jaco- 
bian. By [BCDT01], we may view A as an abelian variety quotient over Q 
l/"") \ of Jq(N). By dualizing, A can be viewed as an abelian subvariety of Jq(N), 

as we shall do in the rest of this article. The cuspidal subgroup C of Jn(-/V)(C) 
is the group of degree zero divisors on Xq(N)(C) that are supported on the 
O \ cusps. It is known that C is finite. Since N is square free, the cusps of Xq{N) 

are defined over Q, so C C Jo(A r )(Q) tor . 

When N is prime, Mazur [Maz77] showed that C = Jo(N)(Q) tor ; in par- 
ticular j4(Q)tor f= C. The torsion and cuspidal groups are of independent 
interest and importance, and relations between them are of great signifi- 
cance. For example, using such a relation, Emerton [Eme03] showed that 
when N is prime, the orders of A(Q) t0 r and the arithmetic component group 
of A are the same, which implies a significant cancellation in the formula 
given by the second part of the Birch and Swinnerton-Dyer conjecture for A 
(when ./V is prime), which is in accord with the conjecture (see, e.g. Aga07| ). 



OO 



Based on some numerical data of Cremona |Cre97| and Stein [Ste| . we 
suspect that ^4(Q)tor Q C more generally when ./V is square free, i.e., that 
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again the cuspidal divisors "explain" the existence of all the rational torsion 
points in A. In this paper, we prove the following result in this direction: 

Theorem 1.1. Recall that A' is an elliptic curve over Q of square free 
conductor N and A is the optimal curve in the isogeny class of A' . Suppose 
r is a prime that does not divide 6N. 

(i) If r divides the order of A(Q) tOT , then r divides the order of A DC (in 
particular, r divides the order of the cuspidal subgroup C ). 

(ii) If r divides the order of A'(Q) tor , then r divides the order of the cuspidal 
subgroup C . 

The proof of the theorem is given in Section HI The main ingredient 
in the proof is to show that the hypotheses imply that the cuspform / 
associated to A is congruent to an Eisenstein series modulo r. Given such a 
congruence, and the fact that / is ordinary at r (which we show), a result 
of Tang [Tan97, Thm 0.4] tells us that A[r] has nontrivial intersection with 
a subgroup of the cuspidal group C, thus giving us statement (i) of our 
result. Statement (ii) follows from statement (i) by [Dum05l Thm. 1.2] 
which says that if £ is a prime such that £ 2 \N (which holds for £ = r, given 
our hypothesis), then if A' has a rational torsion point of order £, then so 
does A (see also Remark l4.ip . 

Bv [Maz77l III. 5.1], the only primes that can divide the order of -A'(Q) t0 r 
are 2, 3, 5 and 7, and moreover there is a finite list of possibilities for A'(Q)tor- 
In particular, our theorem gives new information only when r is 5 or 7 
(and r \ N). However, we expect that by doing more work (using ideas 
from |Maz77j ). one should be able to prove the stronger result that for ev- 
ery prime r\6N, the r-primary part of ^4(Q)t or is contained in C; also this 
result should hold for higher-dimensional abelian subvarieties A of Jo(N) 
associated to newforms. It would also be desirable to see if the hypothesis 
that r\6N can be removed. All this will be the subject of a future paper. 
The present article may be viewed as our first step in relating rational tor- 
sion of modular abelian varieties to the cuspidal subgroup when N is square 
free, as well as generalizing some of the techniques of Mazur [Maz77| for 
prime ./V to square free N. 

In any case, the theorem above puts restrictions on when 5 and 7 can 
divide the order of A'(Q) tOT , and may be useful in its computations, since 
the order of the cuspidal subgroup C can be computed (see, e.g., [Step . 
It may also be useful theoretically in certain situations where there is an 
explicit formula for the order of C. For example, if N is a product of two 
primes p and q, then by [CL971 §3.4], the only odd primes that can divide 
the order of C are the ones that divide (p 2 — l)(q 2 — 1). As a computational 
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application, taking p = 1013 and q = 10007, we see that 5 and 7 cannot 
divide the order of the rational torsion subgroup of any elliptic curve over Q 
of conductor N = 1013 • 10007. 

The organization of this article is as follows. In Section [21 we show how 
to construct certain desirable Eisenstein series. In Section O we state some 
other preliminary results needed for the proof of Theorem 1 1.11 These results 
are about certain constraints regarding the Fourier coefficients of / arising 
out of the existence of rational r-torsion, and could be of independent in- 
terest. Finally, we give the proof of Theorem 11.11 in Section HI Note that 
in any given section, we continue to use the notation introduced in earlier 
sections. 

Acknowledgement: We are grateful to Barry Mazur for pointing out a con- 
struction that we used in the proof of Proposition 12.11 an d to Neil Dummi- 
gan for conveying the proof of Lemma 13.21 as well as for some very useful 
comments on an earlier draft. 

2 Certain Eisenstein series 

If g = g(z) is a modular form, then we will denote its Fourier expansion 
En>o a '»(ff) , ? n & t the- cusp oo (where q = e 2mz as usual) by g{q). If n is a 
positive integer, then <r(n) denotes the sum of all the positive divisors of n. 

Proposition 2.1. Recall that N is square free. For every prime p that 
divides N, suppose we are given an integer 5 P € {l,p} such that 5 P = 1 for at 
least one p. Then there is an Eisenstein series E of weight 2 on Tq(N) which 
is an eigenfunction for all the Hecke operators such that for all primes t\N , 
we have a^(E) = i + 1, and for all primes p\N, we have a p (E) = 5 p . 

Proof. The normalized Eisenstein series e of weight 2 and level 1 has q- 
expansion e(q) = 1/24 — Yl n >i cr ( n ) ( i ,n - It is not a modular form of level 1, 
but it is an eigenfunction for all the Hecke operators. We shall construct 
the desired Eisenstein series by starting with e and "raising the level". 

Let g = ^2 n >QCi n (g)q n be a normalized eigenfunction of some level M 
and let r be a prime that does not divide M. Let (B r g)(z) = g(rz). Then 
we have (see, e.g., |AL701 p. 141]) 
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n>0 n>0 

U r (J2 a nq n ) = ^2a nr q n , 

n>0 n>0 

and T £ (J2 a nQ n ) = £> n ^f + ^ fo n <f £ , V l\Mr, (1) 

n>0 n>0 n>0 

where and U r are the usual Hecke operators at level Mr. For the moment, 
let T r denote the r-th Hecke operator of level M; then equation ([T]) holds 
for T r as well. Thus from the formulas above, we see that T r = U r + rB r . 
Since g is an eigenfunction for T r with eigenvalue a r (g), we deduce that 
U r {g) = CLr{d) ■ 9 — T ■ B r (g) and U r (B r (g)) = g. Thus U r preserves the 
complex vector space V generated by g and B r (g), and the characteristic 
polynomial of U r on this subspace is — a r (g)U r +r. The elements of V are 
eigenvectors for all the other Hecke operators. Now suppose a r (g) = 1 + r, 
as will be the case in our application. Then the characteristic polynomial 
becomes — (1 + r)U r + r, whose roots are 1 and r. Thus the action of U r 
is diagonalizable on V . Moreover, one checks that a basis of normalized 
eigenvectors (for all the Hecke operators) is g r = g — r-B r (g) = g{q)—r-g{q r ) 
and g r = g — B r (g) = g(q) — g(q r ), with eigenvalues 1 and r respectively 
for U r . If g is actually a modular form (of level M), then g r and g r are 
modular forms of level Mr. Since g is normalized, a r (g r ) = 1 and a r (g r ) = r. 
Moreover, one sees from the construction that for all primes £ ^ r, we have 
ae(g r ) = a t (g r ) = a e (g). 

Now pick a prime p that divides N such that S p = 1. Taking M = 1, 
r = p, and g = e in the discussion above, and considering that a p (e) = 
a{p) = 1+p, we get an Eisenstein series e p that is an eigenvector for all the 
Hecke operators such that for all primes £ ^ p, we have ai(e p ) = ag(e) = 
a(£) = £ + 1, and a p (e p ) = 1. Moreover, e p is a modular form of level p 
(see, e.g., [DI951 p. 47]). This proves the desired result if N = p. Note that 
unlike e p , neither e nor e p are modular forms, which is the reason for our 
hypothesis that 5 P = 1 for at least one prime p dividing N. 

If another prime s divides N, then we apply the procedure two para- 
graphs above, taking M = p, r = s, and g = e p . Since a s (e p ) = a s (e) = 1+s, 
we get an eigenform for all Hecke operators such that for all primes £\N, 
the £-th. Fourier coefficient is £ + 1, the p-th. Fourier coefficient is 1, and the 
s-th Fourier coefficient may be chosen to be 1 or s. This proves the desired 
result if N = ps. 
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If N is a product of more than two distinct primes, then by repeating 
the procedure in the previous paragraph for any additional primes that 
divide N, we get an eigenform E with ag(E) =1+1 for all primes £\N , 
a p {E) = 1, and for all primes s \ N with s ^ p, a s (E) can be chosen to be 1 
or s. □ 

The fact that one can construct interesting Eisenstein series by raising 
levels as in the proof above was pointed out to us by B. Mazur. In fact, a 
series as in the proposition above was used for the special case when N is 
prime in [Maz77| (the series e' in § II. 5 on p. 78 in loc. cit.). 



3 Some results on Fourier coefficients 

As before, / denotes the cuspform of weight 2 on Tq(N) associated to A. 
Then / has integer Fourier coefficients. Let w p denote the sign of the Atkin- 
Lehner involution W p acting on /. In this section, we prove certain results 
that show how the existence of rational r-torsion in A is related to the 
Fourier coefficients of /. 

The following lemma is perhaps well known. 

Lemma 3.1. Suppose a prime r divides the order of A(Q) toI . Then for all 
primes t\N , we have ae(f) = l + £ mod r and if p\N, then a p (f) = —w p . 

Proof. The proof of the first claim follows from the discussion in |Maz77^ 
p. 112-113]; we repeat some of the arguments in loc. cit. for the convenience 
of the reader. Let P be a point of order r in A(Q) tor and let G be a finite 
quotient of Gal(Q/Q) through which the action of Gal(Q/Q) on Jo(N)[r] 
factors. Denote by V the (T/rT)[G]-submodule of Jo(N)[r] generated by P 
and by m the annihilator in T of V . Let S = Spec Z, and let J denote 
the Neron model of Jo(N) over S. Let V/g denote the quasi-finite subgroup 
scheme of J[r] whose associated Galois module is V. Since N is square free, 
Jq(N) has semi-stable reduction, and the argument at the bottom of p. 113 
in |Maz77] shows that V/g is either \i T Cg>F r T/m or Z r ®p r T/m. In either 
case, if t is a prime that does not divide N, then the Eichler-Shimura relation 
Ti = Frobg + i/Frobc on J/ F< (where l/Frobi is the Verschiebung of J/F e ) 
tells us that Tg = (1 + £) mod m. In particular, — (1 + i) annihilates P. 
Since T^P = ai(f)P, we see that — a^{f) annihilates P, and hence so does 
ai(f) — (1 + £). But P has order r, so r divides ai(f) — (1 + £), and hence 
ag(f) = 1 + £ mod r. 

If p \ N, then a p (f) = —w p because U p = —W p on the new subspace 
of S2(Tq(N), C). This finishes the proof of the lemma. □ 



5 



Keeping in mind the strategy of the proof of our main theorem (The- 
orem II. ip mentioned in the introduction, we see from the lemma above 
and Proposition 12.11 that coming up with an Eisenstein series E such that 
ai(f) = ai(E) mod r for all primes £\N is rather easy. Proving the congru- 
ence for all ^ | JV for a suitable Eisenstein series is the tricky part, for which 
we need the results below. 

The following fact is stated without a detailed proof in [Dum05, §4]; 
the ingredients of the proof were communicated to us by N. Dummigan. 

Lemma 3.2 (Dummigan). Let r be an odd prime that divides the order 
of A(Q) tor- If P is a prime that divides N such that w p = 1, then r \ (p+ 1). 

Proof. By the hypothesis, there is a nontrivial point P in A(Q)[r]. Then 
P G A(Q p )[r]. Since p 2 \N (as N is square free) and w p = 1, the elliptic 
curve A has non-split multiplicative reduction at p. Thus there is a q G Q* 
and a Tate curve E q over Q p , such that A is isomorphic to E q over an 
unramified quadratic extension K of Q p . Now E g (Q p ) = Q p /g z over Q p ; 
let x G Q p be such that its image is in E q (Q p )[r] corresponds to P. Since 
rP = 0, we have x r G q z , i.e., x r = q n for some n G Z. Let £ r be a primitive 
root of unity in Q p , and let q 1 ^ denote a choice of a root of X r = q in Q p . 
Then x = Q q b ^ r , for some a, b G {0, . . . , r — 1}. 

Since K is unramified over Q p , its Galois group is generated by the 
Frobenius endomorphism, which we will denote by a. Now yl(Q p )[r] is the 
same as E g (Q p )[r], except that the Galois action on ^4(Q p )[r] is twisted by a 
nontrivial unramified quadratic character. Thus since P G A(Q p ), we have 
cr(x) = 1/x modulo q z . So the valuation of a(x)x is an integer multiple of 
that of q, and since a preserves valuations, we have 2b/r G Z. If & ^ 0, then 
this is possible only if r = 2. 

Now consider the case where 6 = 0. Then a / 0, and x = If Cr Q p , 
then <r(Cr ) = (r P and so Cr P = 1/Cr • Since Cr is a l so a primitive r-th root of 
unity, we have r \ (p+1). If ( r G Q p , then since a fixes ( r , we have ( r = 1/Cr, 
i.e., r = 2. This proves the lemma. □ 

Remark 3.3. In the lemma above, the hypothesis that r is odd is necessary. 
For example, the elliptic curve 14^41 has rational 2-torsion and W2 = 1 
(taking r = p = 2, we do not have r | (p + 1)). 

Following |Maz77l p. 77 and p. 70], by a holomorphic modular form 
in cj® 2 on Tq(N) defined over a ring R, we mean a modular form in the 
sense of [Kat73, §1.3] (see also [DR731 § VII. 3]). Thus such an object is a 
rule which assigns to each pair (E/t,H), where E is an elliptic curve over 
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an i?-scheme T and H is a finite flat subgroup scheme of E/t of order N, a 
section of w|y T , where uje/t ls the sheaf of invariant differentials. If r is a 
prime such that r \6N and / is a modular form of weight 2 on Tq(N) with 
coefficients in Z[-jy], then by [Ma z77l Lemma II. 4. 8], there is a holomorphic 
modular form in uj® 2 on Tq(N) defined over Z/rZ, which we will denote 
/ mod r, such that the (/-expansion of / mod r agrees with the g-expansion 
of / modulo r. 

Lemma 3.4 (Mazur). Let R be a ring such that 1/N £ R. Let g be a 

holomorphic modular form in oj® 2 on Tq(N) defined over R. Suppose that 
for some prime p that divides N , the q- expansion of g is a power series 
in q p , i.e., there is h(q) E R[[q]] such that g(q) = h(q p ). Then h(q) is 
the q-expansion of a holomorphic modular form in u>® 2 on Fq(N/p) defined 
over R. 

Proof. The lemma is proved in [Maz77j under the condition that N is prime, 
and p = N (Lemma II. 5. 9 in loc. cit.). The same proof works mutatis 
mutandis to give the lemma above, with the only change to be made being 
to replace certain occurrences of N by p (e.g., q N becomes q p everywhere) 
and the occurrences of N - 1 at the bottom of p. 84 in [Maz77] by 4>(N), 
where <j) is the Euler 0-function. □ 

Proposition 3.5. Suppose there is a prime r that does not divide 6N such 
that r divides the order of A(Q)tor- Then there is a prime p that divides N 
such that w p = —1. 

Proof. Suppose, contrary to the conclusion of the lemma, that for every 
prime p that divides N, we have w p = 1. If M is a positive integer, then 
let us say that a holomorphic modular form g in uj® 2 on T (M) defined 
over Z/rZ is special at level M if a n (g) = a( ^ n M , ) n p |M(~ 1 )° rdp(n ' > m °d r 
for all positive integers n. Using Lemma 13. II and the fact that / is an eigen- 
vector for all the Hecke operators, we see that / mod r is special at level N. 

Claim: If M is a square free integer and g is a holomorphic modular form 
in u!® 2 on Tq(M) defined over Z/rZ that is special at level M and s is a 
prime that divides M, then there exists a holomorphic modular form in u® 2 
on Tq(M/s) defined over Z/rZ that is special at level M/s (which is also 
square free). 

Proof. By Proposition [2TT1 there is an Eisenstein series E which is an eigen- 
vector for all the Hecke operators, with ag(E) =1 + 1 for all primes £\M, 
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a p (E) = p for all primes p that divide M except p = s, and a s (E) = 1. 
Let pi, . . . ,pt be the distinct primes that divide M/s. Then for any positive 
integer n, 

a ^ E ) = a ( i\pi OTA ^ {n) mod r. 
\{n,M)J a± 

Since by Lemma 13.21 = —1 mod r for i = 1, . . . ,t, we see that a n (E) = 
a n (g) mod r if n is coprime to s, and thus {E(q) — g(q)) mod r is a power 
series in q s , i.e., there is an h(q) € (Z/rZ) [[</]] with h(q s ) = (E(q)—g(q)) mod 
r. By Lemma l3.4| h(q) is the g-expansion of a holomorphic modular form, 
which we again denote h, in uj® 2 on To (M/s) defined over Z/rZ. 

Let 5' = h/2. We shall now show that g' is special of level M/s. Let n 
be a positive integer, m' = t^yj and e = ord s (n) (so n = m's e ). Then 

a n (h) = a m t s e(h) = a m , s e+i(E - g) = a m , s e+i(E) - a m , s e+i(g) mod r. (2) 

Now a n (E) = a m '(E)a s e+i(E) since E is an eigenfunction and a n (g) = 
a m'(g)0' S e+i(g) mod r since g is special. Putting this in ([2]), we get 

a n (h) = a m '(E)a s e+i(E) - a m r(g)a se +i(g) 

= a m ,(g)(a s (Ey +1 -a s (gr +1 ) mod r, (3) 

where the last congruence follows since a m >{g) = a m '(E) mod r, considering 
that m! is coprime to s. Now 

a s (E) e+1 - a s (g) e+1 = 1 - (-l) e+1 = 1 - s e+1 mod r, (4) 

since by Lemma 13.21 s = — 1 mod r. Also, 

1 - s e+1 = (1 - s)(l + s + • • • + s e ) = 2a(s e ) mod r, (5) 

again considering that by Lemma 13.21 s = —1 mod r. Thus putting © 
in (|3J), and the result in ([3|), we get 

a n (h) = a m ,{g) ■ 2a(s e ) = 2^^— ^— ] [] (-l)- d P (-') . c(s e ) mod r, (6) 

^ p|M 

where the last congruence follows since g is special at level M. Now since 
n = m's e , with m! coprime to s and s\(M/s), we have 

( m ' \ I e\ _ ( m ' se \ _ ( m ' se \ _ ( n \ (7\ 

a \(m f ,M)J a[S )~ a \(m>,M)J ~ <T \(m's e ,M/s) J ~ a \(n,M/s)J [) 
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and 



ordp(m') 



n (-d 



ord p (m's e 



) = (_l)°rd p (n)_ 

p\(M/s) 



(8) 



p|M 



Using ((TJ) and jE]) in ©, and recalling that 5' = /i/2, we see that 




mod r, 



i.e., g' is special of level M/s. 



□ 



Starting with / mod r, and repeatedly using the claim, we see that there 
is a holomorphic modular form that is special of level 1, which is nontrivial 
since the coefficient of q is 1 mod r for a special form (of any level). But 
by [Maz77t Lemma 11.5.6(a)], there are no nontrivial holomorphic modular 
forms of level 1 in u® 2 defined over a field of characteristic other than 2 
and 3. This contradiction proves the lemma. □ 

In the proof above, the idea of "lowering levels" and getting a contra- 
diction is taken from an observation in [Maz77j , where N is prime and the 
level is "lowered" only once (see the proof of Prop. II. 14.1 on p. 114 of loc. 
cit.). We noticed that the Fourier coefficients work out so nicely (in view of 
Lemma \3.2\i that the "level lowering" process can be repeated (when N is 
not necessarily prime), giving the proof above. 



Recall that the hypotheses are that iV is a square free integer and r is a 
prime such that r \6N and r divides the order of A(Q) t0 r- We have to show 
that r divides the order of the cuspidal subgroup C. 

If p is a prime that divides N, then let S p = —w p if w p = — 1 and 
S p = p if w p = 1. By Proposition 13.51 for at least one p, we have w p = — 1, 
i.e., S p = 1. Hence by Proposition 12.11 there is an Eisenstein series E such 
that for all primes l\ N, we have a^{E) =1 + 1, and for all primes p \ N, 
a p (E) = 1 = — w p if w p = —1 and a p (E) = p if w p = 1. In view of 
Lemma |3.2| if p \ N and w p = 1, we have a p {E) = p = —1 = — w p mod r. 

Considering that / and E are eigenfunctions for all the Hecke operators, 
we see from the paragraph above and by Lemma [3. II that a n ( f) = a n (E) mod 
r for all n > 1. Hence (f(q) — E(q)) mod r is a constant; call this constant c. 
Since r\6N, we may consider the holomorphic modular form (/ — E) mod r 



4 Proof of Theorem 11.11 
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in u)® 2 on To(iV) denned over Z/rZ. Using Lemma 13. 4\ for any prime p 
dividing iV we get a holomorphic modular form in uj® 2 on Tq(N/p) defined 
over Z/rZ, whose g-expansion is the same constant c. By repeating this 
process (which we can do since at each stage we have a g-expansion that 
is constant - in fact, the same constant c), we get a holomorphic modular 
form in u® 2 on ro(l) defined over Z/rZ, whose g-expansion is c. By |Maz771 
Lemma 11.5.6(a)], there are no nontrivial holomorphic modular forms of 
level 1 in u>® 2 defined over a field of characteristic other than 2 and 3. 
Thus c = mod r, and so a n {f) = a n (E) mod r for n = as well. Hence 
/ = E mod r. 

To E is associated a subgroup Ce of C by Stevens (see [Ste82} Def. 1.8.5] 
and |Ste85t Def. 4.1]). Since r\N, by Lemma [331 a r = (1 + r) = 1 mod r; 
in particular, / is ordinary at r. By [Tan97, Thm 0.4], A[r] f] Ce ^ 0, and 
thus r divides the order of A n C. The fact that r divides the order of Ce 
follows from the intermediate result Prop. 1.9 of [Tan97] as well. This proves 
part (i) of Theorem ll.il As mentioned in the introduction, part (ii) follows 
from part (i) by taking £ = r in [Dum05, Thm. 1.2] (Dummigan's theorem 
in turn follows from the proof of Prop. 5.3 in [Vat05]). 

Remark 4.1. Neil Dummigan remarked to us that one need not use [Dum05l 
Thm. 1.2] to deduce part (ii) of Theorem 11.11 from part (i) since our methods 
prove the following special case of |Dum05t Thm. 1.2]: if A' is an elliptic 
curve of square free conductor N having a rational point of order r for a 
prime r such that r\6N, then the optimal curve A in the isogeny class of A' 
also has a rational point of order r. Clearly, this shows that part (i) implies 
part (ii). The details of what we claimed two sentences above are as follows: 
Lemma 13.11 holds with A replaced by A' under the additional hypothesis 
that r is odd (by considering reduction modulo £, we see that if £ is a prime 
such that £\N, then r divides |A'(F/)| = \A{F t )\ = a e {f) - (1 + £)) and 
Lemma 13.21 also holds with A replaced by A' (the hypothesis w p = 1 im- 
plies that A has non-split multiplicative reduction; hence so does A' and the 
proof goes through with A replaced by A'). In the proofs of Proposition 13.51 
and Theorem II .1^ the only place where the hypothesis that A has a rational 
point of order r is used is in quoting Lemmas 13.11 and 13.21 Since the con- 
clusions of these Lemmas hold under the hypothesis that A' (instead of A) 
has a rational point of order r (and the hypothesis that r is odd, which is 
already assumed in Theorem II. ip , the proof of Theorem 11.11 goes through 
to prove that A has a rational point of order r, as claimed. 
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